Operation Manual – SSH Terminal Service
H3C S3600 Series Ethernet Switches-Release 1510 Chapter 1
SSH Terminal Service
1-25
1.1.7 SSH Client Configuration Example
I. Network requirements
As shown in Figure 1-13:
z Switch A serves as an SSH client, with a user name of client001.
z Switch B serves as an SSH server, with an IP address of 10.165.87.136.
II. Network diagram
SSH Server
SwitchB
Vlan-interface1
10.165.87.136/24
Vlan-interface
10.165.87.137/
SSH Client
SwitchA
1
24
Figure 1-13 Network diagram for SSH client configuration
III. Configuration procedure
1) Configure SwitchB
# Create an RSA host key pair and server key pair
<H3C> system-view
[H3C] rsa local-key-pair create
# Create a VLAN interface and assign an IP address, which the SSH client will use as
the destination for SSH connection.
[H3C] interface vlan-interface 1
[H3C-Vlan-interface1] ip address 10.165.87.136 255.255.255.0
[H3C-Vlan-interface1] quit
# Set the authentication method of the user interface to AAA for SSH client.
[H3C] user-interface vty 0 4
[H3C-ui-vty0-4] authentication-mode scheme
# Set the protocol that a remote user uses to login as SSH.
[H3C-ui-vty0-4] protocol inbound ssh
[H3C-ui-vty0-4] quit
# Set login protocol to SSH, specify commands of level 3, and authentication password
to "abc" for user clinet001.
[H3C] local-user client001
[H3C-luser-client001] password simple abc
[H3C-luser-client001] service-type ssh level 3
[H3C-luser-client001] quit